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(o / ^Abstract: 

PROBLEM TO BE SDLVEO: To enable detecting an illegal 

<-,.' 'V 

terminal device before damage occurs more surety than 
conventional ,«. 

SQLOTiON: When data is sup aired front a VTR device I030 and 
the like having respective intrinsic EU 164 to STB 1 20, a 
certification means 21 1 performs certification based on the 
psuscs'ibcd control stasidai'd abouttheir data request. It Is decided 
whether required data is transferred. from STB 120 to the VTR 
device 1030 performing : mquest or not in accordance with the 
certification result, and a data request history information storing 
means 212 sends data request history information including fill 
164 of the VTR device to a control device i 1 0 in accordance with 
the Certification fosu It. The control device discriminates whether 
the VTR device 1 030 is a regular one or not by: the prescribed 


ilnation st&m 

lard iidlmng 

the data reque 

st history 

V 


ation, makes 

CRT based c 

>n the certificai 

tion result. 

and 

t to the SET 

120, 





* NOTICES * 

JPO axTd IMPIX are not; responsible i'ox any 
daamges caused by the o£ t;hla trans la t i or* . 

I. This document has been translated by computer. So the tmnslation mav no 
% s f*m slaows the word which can not he translated. 

3 in the drawings, anv words are not translated. 
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[Detailed Description of the In ventfonj 


non 


[Field of the Inversion '[This invention relates to a criteria-of-conlroi preparation method, a crlterid-of 
control preparing sy stem, and a medium. 


i A, . 

*. j 'I', 5 

; yjv/ 


[Description of the Prior ArlJA receiver for exclusive use receiving, and recording the TV program etc. 
which are sent by satellite broadcasting with the VTR devices connected to the recei ver, or vie wing and 
listening to them on television convent to naiiv. is performed. 

[0003] In this case, whai record is forbidden, and the conditional data whose record is enabled only once 
are in the image and voice data broadcast. Therefore, hi order to keep these conditions. It will he the 
requisite that reccgnlce this condition correctly and the user side uses the device which operates regularly, 
f0004]Then, when transmitting data recordable once & orn a receiver for exclusive use, for example to 
VTR devices, usually authentication operation for checking first whether the VTR devices ate the above 
regular devices is performed. Data is not transmitted when it judges with it being an Inaccurate device 
which performs operation, which disregarded the ahove-mentloned conditions as a result of this 
authentication 'operation, 

[OOOSjFiereafter, it is explained as the composition of the conventional exclusi ve receiver and a terminal 
unit focusing on the authentication operation, referring to drawing la. 

•. ' x <v ' ; . ***-' — ‘•■***** 

[0006 [ D rawi ng 12 is a block diagram showing the eonyentionai junction state and composition of an 
exclusive receiver and a terminal unit. 

[0007] As shown in the figure, the antenna 101,0 is a means to receive the broadcasting electric- waive front 
a satellite. 

The satellite broadcasting receiver (this is Only hereafter called STB) 1020 Is a means to change the 
hroadeasting electric- wave which received into AY information. 

The data-cornmunications line 1070 is a bus line for the data communications in which STB1Q20 and each 


I unit described below were 

formed m bets 

veen, mo.re< 

)ve.r — a terminal uuk 

. . 

SVtS 1 * ^ 

V'S 

.... (.... A •••• ! ••• 1030 -- VTR 

devices — (•• • B 

S 040 

a recorder f- -- C • 

•••) •••• 1050 - 



data comm omeat tons — 


a 


te ••• 


70- 


devices 

furthermore — TV-- a device — ■(— 
connecting -- having — f 

[0008] Next, the Internal configuration of STB 1020 is described further, referring to the figure. 

[0009]1'ha t is, the reception' means 1021 is s means to link directly .'with the antenna 1.0 10, to restored© the 
received data, to cancel the scramble for broadcast given to the received data, and to separate the 
multiplexed received data further, ’The encoding means 1622 is a means to encipher the AV information 
out putted from the reception means 1021 by the work key Rw for the encryption which it had beforehand 
with a compression state. The encoding means 1022 is a means for enciphering the work key Kav using the 
sub key obtained from the authentication means 1023, and outputting the enciphered work key and the 
both sides of the A V Information which enciphered [ above-mentioned ] to; a terminal unit via the data 
input/output means 1024, it is because it Is premised on recording that it is necessary to also send here the 
work key enciphered as mentioned above to a terminal unit after decrypting the transmitted AV 
information in a. terminal unit, The authentication means 1023 is a means to perform authentication work 
using a predetermined secret lit notion, and to generate the sub key corresponding to an attestation partner 
as the result in order to confirm, rmauallv whether each other's both devices are regular devices between 



the terminal units which have carried out the transfer request of AV foformafcfon, The authentication 
means 1023 makes all the peculiar secret Emctiorts (Sa, Sb, Sc, Sd, „* Sn. ,,.) which all terminal units ha ve 
correspond with those identification numbers, ami holds them. The data transfer force means 1024 is 
IEEE 1394 known as a digital interface. The data transfer means 1024 is a means to perform two 
transmission, Isoelvfoilons transfer suitable for a data transfer like the image for which a real time nature 

■ S» 

guarantee is needed, or a sound, and a ssyna'ono us transfer suitable for transmission' of data for attestation, 
a command, etc. without the necessity. 

[00 10 j Nest, the internal configuration, of VIE devices (A) 1,030 is described further, 

[0011 '[The data transfer means 1031 is the same means as the data transfer means 1024 as shown in the 


roNi-v 


It is a means to receive the enciphered work key and the enciphered AV information. 

The authentication means 1032 has the peculiar secret function Sa beforehand. 

It is a means to generate the sub key K sa and to output to the decoding means 1033 as a result of 

W- V t vv 

authemication work:. 

The decoding means 1033 is a means to decrypt the enciphered work key which was obtained from, the 
data transfer means 1031 by the sub key l€sa, and to decrypt the A V information which restored the work 
key Kw and. was enciphered by the work key Kwv The record reproduction means 1034 is a means to 
record, the demoted AV information and to reproduce the record data, 

C“. vV -IS. 
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040 — a recorder 
removing - the aDove ~~ 
However, the secret 


60 — a record ^production means: 

VTR devices A — ) — 1030 - composition — Amdamciitalv-* It is the same 
ftiiictions which each authenricatlon mmm has beforehand will be SWSt\ and Sd * if h says m order of 
each above ■ramtsoned device, Therefore, the sub keys generated by the authcnticaticn work of each 
device arsd STB 1 020 wil l be ISsb, K sc, and KM. if it says in abo ve order. 




J)0l3]The contents of authentication work 'are described [In / next / the above composition ] briefly, 

[001 4]Ifor example, when performing the transfer request of AV Information from. VTR devices (A) 1 030 
to $TB 1.020, in advance of the execution , the following authentication wofo Is needed. 

[00 1 5]That is, first, the authentication means 1032 of VTR devices (A) 1030 generates the random 
number Al and A2. and enciphers this with the secret function Sa, Mere, the enciphered random number is 
indicated to be Sa (Al, A2), The authenltcatlon means 1032 transmits Sa (AT, A2) and the seif 
identification number IDa to STB 1020 via the data transfer means 1031 (Step 1001), lit 
identification number is beforehand given by the number oeeuliar to each ternh.ua I unit. 

W, V; f. 
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which STB 1 020 should use for attestation between VTR devices (A) 1030 is specified. 

[00!7iNext, Sa (Al, A2) which the authentication means .1 023 of STB 1.020 received [ above-mentioned ] 
using the ..secret fonetion Sa is decoded, and the latter random number A2 is sent to VTR devices (A) 1030 

4 s-’ ... ........ ... • * 

among Al restored and A2, without enciphering (Step 1003). 

[O018'].Nexl, the authentication means 1. 032 of VTR devices (A) .1 030 compares A2 sent from. STB 1020 
with the random number A2 which oneself generated at the afeove-mentioned step 1001. If both sides are 
in agreement , STB 1020 can judge that it Is a regular device (Step 1004), 

[001 9] Next, the aurhentication means 1023 by the side of STB 1020 generates the random number Si and 
B-2, and enciphers this with the secret function Sa. And Sa (BI, B-2) is transmitted to VTR devices (A) 


Al 

I' 




;et> j.yiO), 


1 00201 hi VTE devices ( A) 1030, Sa (B I , B-2) which the authentication means 1032 received [above- 



motioned] is sing the secret funetkm Sa Is decided, and latter random number B- 2 is sent to STB 1020 
among BI and B-2s which were restored- without enciphering (Step 1006). 

[0O21]Next, the authentication mea ns 1023 compares B~2 sent from VTB: devices I A) 1030 with random 
number B : »2 which oneself senerated at the above-mentioned step 1003. If bo th aides are in agreement it 

. A ■ • A>’, 

can be judged that VTR devices (A) 1030 are regular devices (Step 1007), 

f0Q221Bv tiie above, that both both aides are regular devices can cheek mutually, it comes, authentication 
work is completed, and transmission of the AV information to VTR- de vices (A) 1030 is permitted. 

[0023] The four random numbers A 1, A2, and BI and B-2 exist in die authentication means 1. 023-1.032 of 
both devices as a result of this authentication work. Then, next, both authentication means 1 023- 1 032 
generate the above-mentioned sub key KM using the random number At and Bi , respectively. Since not 
mmM. the random number A2 and B-2 has the ckcnm^ucm where these were transmitted without 

V*'. ' .... .... ........ .... . . . ...... 

enciphering,, when generating a sub key, those who use the random number Ai without such the 
circumstances and BI are because it sees from the safety of'a key and excels more. 

|Q024]ln the encoding immm .1022, eshm the mb kev K.sa.^ierdted hv earryiuu out m this wav* the work 
key Kw is enciphered and. AV information is enciphered by the work key Kw, And the bo th sides of AV 
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fProblcmfs) to he Solved by the Inverulonlflowever, in the above authentication methods, an inaccurate 
person copies secret fe not ion Sn and. the . identification number I'Dn of a regular device as it is just as it is. 
When the inaccurate device which can perform the same authentication method as the above was 
manufactured and. sold and the inaccurate device was used, in the above-mentioned authentication method, 
it has not detected that the device is an inaccurate device, and transmission of AV information was not 
able to be prevented, 

[00:2?]Generaily, in the unauthorized use by the 3rd person, such as a theft ATM card, direct damage 
occurs notably to the owner of the .ATM card, 1'herefore, it is possible to prevent an unauthorized use 
promptly. On. the other hand, as a recei ving terminal device of broadcast data, even, if the above inaccurate 
devices exist, there is peculiarity dint damage to authorized, personnel cannot surface easily. For example, 
even if it copies the data Of copy prohibition unjustly, and it is rare that the concrete damage in which a 
royalty etc. are -arrears surfaces and. it surfaces, time most by It will have passed and if will also be 


vtl 


expected mat carnage becomes senous. 

[0O2S] 13ms, in the conventional atnhenfication method, since deer correspondence was not able to he 
performed alter damage comes to light, it had the technical problem that It was imperfect as an 
authentication method, 

f0029]Au object of this invention is to provide the criteria-of-coutrol preparation method, criteria-of- 
control preparing system, and. medium which can ensure detection of an inaccurate device compared, 
the former in consideration of the technical problem of such a con ventional met hod . 

[0030] 

[Means for Solving the Problem] When this invention according to claim 1 has a data request to a data 
transfer unit from each data request terminal unit which has a. respectively peculiar identifier, about those 
data requests. As opposed to a data request, terminal unit which performed attestation based, on a 
predetermined attestation standard, and performed said data request from said data transfer unit according 
to a result of said attestation, Determine whether transmit the demanded da ta and a controlling device is 



received from said data transfer unit according to a result of a usual state or said attestation. Send data 
request history information containing. said identifier of the data request terminal unit, and said controlling 
device, It is a criteria-of-eontml preparation method which judges whether a data request terminal unit, 
contained in the data request history information is regular, is based on the decision result, and creates or 
updates criteria of control by a predetermined fudging standard using said data request history information 

) v*. v y* V>-' V' V' A V* 


sent, 

[003i|This Indention according to claim 5 a data transfer unit connected to each data request terminal unit 
which has a respectively peculiar identifier the singular number or a contro lling device to manage [ two or 
more 1. An identifier ofa schedule connected newly or said data request terminal unit connected newts 
sent using new registration information to include by a predetermined judging standard. It is a eriteria-ofe 
control preparation method which judges whether a data request terminal unit corresponding to said new 
registration information is regular, is based on the dec ssfon result, and creates or updates criteria of 
control 

10033] A wmwim this mmMmn accoMioe: to claim. I t is ehameterfeed by that 

comprises the following. 

Two or mom data request ferminai units which have a respecti vely peculiar identifier. 

When a. data request occurs from these data request terminal unit* about those data requests* performing 
attestation based on a predetermined attestation standard •••• (1) -■-■ to a data request terminal unit which 
performed said data request according to a result of the attestation, A data, transfer unit which outputs data 
request history information which determines whether transmit the demanded data and contains said 
identifier of the data request terminal unit accordion to a result of i 2) usual state or its attestation, 

A controlling device which, acquires said said outputted data request history Information, judges whether a 
data request terminal unit contained in the data request history Information by predetermined judging 
standard is regular, is based on the decision, result, and creates or updates criteria of control 


100333 

[Embodiment of the Invention jBelow, an .■ embodiment of the invention is described with reference to 


s<- 


wmgs. 


[0034 1 ( A 1st embodiment) Drawing I is a Mneblock diagram showing the composition of the criferla-oi-- 
control preparing sy stem in the 1 embodiment of this invention, and It describes the composition of the 
eriteria-of control preparing system, of this embodiment* referring to the figure hdow. In this- embodiment* 
the same numerals were given to what was explained bv drawing 12, and the thing of the fundamentally 
same composition, and the detailed explanation was omitted. 
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each STB 120, 130, this embodiment — 1st STB. t ay 
that it is provided in N Mr. house in Okinawa. 

[0036] The terminal, unit is connected to each STB 1 20*1 3Ct on the data-eornmumcauons line 1.070, 
respectively. That is, VTR devices 1030, VTR devices 1040, the recorder 1 DSC), and the TV device 1060 
are connected to the I STB S 20, and VTR devices 1 50* the recorder 160. and the TV device 170 are 
connected to the nSTBl oO as shown in the figure. Mere, suppose, that VTR devices 1.50 are inaccurate 
devices. This inaccurate device shall be a device manufactured by injustice by copying the thing of regular 
VTR devices 1.030 as it is just as it is as the license key mentioned later and EIJI64. 
f0037]13tese each, terminal unit is provided with IBEE1394 as the data transfer means 1 031 as drawing 12 





1.64 is a 64- bit 


explained it. in this embodiment, these Terminal units are hemrehand provided with Eul64 In IEEE 
as a number peculiar to each device, I,e„ an identification number, respectively, Bare, El 
identification code. These terminal units are provided with die license key corresponding to the 
identification number. Although this license key 'is a secret secret kev given only t© a regular terminal unit, 
the identification number of E0I64 is wha t is called an. ID number that can be known also by whom on the 

occasion of data transfer etc. Hereafter, the identification number of EC1I64 is only called EUI64 or an ID 

. . . . ..... ..... . . . .... . . . • 

number. Peculiar EUIB4 is provided also about each STB120J30. To each device, these Identification 
numbers support the couple I and do not overlap, 

[003S]Next, the internal configuration of STB 120 is described in detail, referring to drawing.2, 

|0039]In addition to the composition of the authentication means 1023 described by drawi ng 1 2, STB 1 20 
is provided with the data request history information storage means 212, the modem 213, the CEL 
recording device 214. and the CRL storing means 2 1 5 as shown in drawing 2, 

. . V*' ■■■•■ ------ ... - - - - .' V»N* ’ ’ 

[0040 jibe authentication means 211 are a point provided with the service key formation function which 
can make the service key which is the same key as a license kev, and a. point which rakes into 
consideration the list of the inaccurate device mentioned later in attestation, and are different from the 
authentication means .1023 described by drawing 12. This service key formation function is a function 
which generates a service kev from EUI64 OD number) obtained from the terminal unit. Therefore, the 

■V-' \ ' . r # . ' 

authentication means 21 1 does not need to memorise Eli 164 of a terminal unit beforehand. 

[OOdljThe data, request history information storage means 212 is a means to generate the hysteresis 
information about the data request, and fe memorise through the authentication work mentioned later each 
time about what transmission of requested data completed, when the data transfer request of a 
predetermined program occurs from a .terminal, unit. This data request history information comprises 
EUI64 of the terminal unit which carried out the data transfer request, time information which specifies 
time with the data request from that terminal unit, and location, information which, specifies the 
whereabouts of that terminal unit. The data request history information storage means 212 acquires these 
EUI(s) information - location information from the authenficatlon means 211. The data request history 
information storage means 212 accumulates such hysteresis information, from each terminal unit of one- 

. .... y •: 1 ' ' •: : ' 

month Hazama, and is a. means sent to the controlling device 1 10 via the modem 2 1 3 for every month. 

. . ... ... w. ... ..... y 

[O042]The CRL recording device 21.4 is a means which obtains the list data for which the inaccurate 
device sent from, the controlling device 1 I Q was indicated from the modern 213, and is recorded and 
updated at the. CRL. storing means 215, The CRL storing means 215 Is a memory means for storing tite list 
data of an inaccurate device. In this specification, the list Of an inaccurate device is only called CRL 

A .7 ** 

(Certification Revocation List), 'The criteria of control of this invention according to claim i correspond to 


[0Q43]Next, the Internal configuration of the controlling device 1 10 is described in detail, referring to 
drawing 3. 


f()044]The histc 

try inf 

y . 

ormation storage 

means 

1 \? 

H a m 

vans to make 

each data i 

•easiest history 

V 

Jofovmatioii trm 

ismta 

sd for every moni 

ih from 

sac 

h STB 

120,130 at i h 

a period co 

r?m pond with EUI64 of 

STB of a transn 

nttina 

V. 

agency, and to h 

lemork 

e .it 

tempo 

tartly via the 

modern 1 1 

I as shown ha drawing 3. 


The unjust device determining means 1.1,3 in all the data request history information for one month from 
each STB memorized by the above-mentioned history information storage means 112, When two or more 
EUI64 [ same j exist, it Is a means to determine the data request terminal unit which, compares the time 
information and location information corresponding to EIJ164 of these plurality, respectively, and has 
EUI64 with an unjust possibility, .The CRL preparing means 1 14 Is a means to obtain the ahove--mentio.net 
decision results outputted for every month from the unjust device determining means 1.13, to create the list 
of an inaccurate device, and to output. All the CEL mentors measures 1 .1 $ are means to obtain the list data 


W/, 



from the CEL preparing means 1 14, to make addition of a new inaccurate device, correction of data, etc, 
to the already accumulated list, and to memorize all the ORL(S) about the terminal unit of all the areas. 

The individual CEL preparing means I 16 is a means to transmit to STB which creates individual CEL 
corresponding to each STB, and corresponds via the modem 1 1 1 . Individual CRL is a list of the inaccurate 
device packed for every STB, and is not created about STB from, which the inaccurate device is not 
detected, 

[0045] Mainly referring to drawing 4 - drawing 6 fc'h operation of this embodiment is described, and the I 
embodiment which starts the cnteria-of-comrol preparation method of this invention simultaneously is 
also described [ in / next / the above composition ). Drawing. 4 is a figure to explain the memory content 
of the data request history information storage means 21:2 in STB 120 from January 1, 1997 to the 31 St of 
the same month, and drawing $, It. is a figure explaining the memory content of the history information 
storage means 112 in the controlling. devices from January I, 1997 to the 31st of the same month, 

W;*V‘ --•••• V-; • V 

[0046] Here, as of January 31, 1 997, to CEL (fist of an. inaccurate device) of the CRL. storing means 215 of 
STBI20, the inaccurate device is not yet indicated, i,e,, it presupposes a t it that it is in an empty situation. 

I t is skv condition also about CEL of the CRL- storing, means of S I B 1 30. 

[0047] First, explanation hem describes the authentication operation using CRL in (I) STB, next describes 
creation of CEL in (2). controlling; devices* and distribution of CRL to STB, and states the updating 
operation of CRL in (3) STB to the last. 

( I j Authentication operation using CEL in STB ' here, when STB 120 receives the transfer request from 
VTR devices 1030 which are regular devices about ike AT information of the program which received by 
the reception means .1:021., tor example, perform the following authentication operation. This transfer 
request satisfies the demand which suited at 1-2:10 a,m, on January 10, Ilelsei 10 In the hy steresis 

a • ' .y 

information indicated in draw in g 4 and dra wing 5 . 

[O048]Step 1: The authentication means 2X1 of SIB 120 obtains first EOI64 (here, they may be No. 

1 1030) of VTR devices 1030 which have carried, out the transfer request ifom. the data transfer means 
1024. 

[0049J$tep 2; and the authentication means 211 confirm whether the same number 0 the BUI64 is 
registered in CRL as a number of an inaccurate device with reference: to CRL of the CRL storing means 
21:3. At this time, since CRL i.s sky condition as above-mentioned, the decision resn it ofbei.ua 
unregistered comes o ut and that EUI64 goes into full-scale antheut icat ion work (Step 3) . If a judgment 
that |t registers with CRL, comes out In this check stage, subsequent authentication work will not be 
performed and a data transfer with, a demand will not he performed, either, 

[0050] Step 3: The authentication means 2:1 1 generates a service key from a service key formation function 
using BUI64 of VTR devices 1030 obtained at Step 1. Thus, the: generated service key is the same key as 
the license key which VTE devices 1030 have, A license and a service key correspond to the secret 
function S a described by drawing 1:2. 

rfv' ------ VkV*' ■ 

|0051]On the other hand, VTR. devices 1:030 perform the same authentication work, as what was already 
explained by drawing; 12 fov both Hazama us ins the license kev which it has 'beforehand using the service 
key which carried out the authentication means 21 1 in this way, and was generated. That Is. both devices 
generate the same sub kev Ksa using. the random number A i and B1 , respectively. 

[0052]$tep 4; The encoding means 1022 enciphers the work key Ew using the above-mentioned sub key 
Ksa, and enciphers AV information using the work key Kw, and transmits the encryption data (Ksa i Kw), 
Kw (AVI) of these both skies to VTE devices 1030. 


[0053]$upposing it is a process of this attestation and EL164 sent from the terminal unit is a completely 
random number which does not have the correspondence relation beforehand determined as the license 
kev which that terminal unit has, for example. The key generated by the service key formation function 



steps being in- agreement with the license key. because, a service key formation function tfee account of 
the upper -- it is because it is constituted- based on the correspondence relation defined. beforehand so that 
a service key ma v he generated iron:? EBM4, Therefore, the data transfer which the above-mentioned 
attestation on condition of the key which both devices have in this case Being the same stops having 
material iced, anti was demanded in this case is not performed, 

[0O54]Step 5 ; the data request history information storage means 212, brom the authentication means 211 
as BUI 64 of VTR devices 1 030 which are the destination about what data transfer completed, at Step 4, As 
No. 1 ! 030 and time Information, with a demand, each information, at 12: 10 a. nr on January 1.0, l ieisei 10 
is acquired, and it records as data request history information (refer to : d|iyi4ng. : 4i.. Here, the statement of 
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above-mentioned steps 1 -3 like the above. And the data request history information, storage means 212, To 
each historical, data (refer to drawing 4 1 by which record accumulation, was earned out in one month, it Is 
EUI64 (here) of STB 120, And you consider it as No. 90001, let what attached the telephone .number as the 
location information Be data request history information (it transmits to the controlling device 1 10 for 
every month via the telephone line, 1.40 from the. modem 213 ). 

(2) Creation of CEL In a controlling dev ice, and d istribut ion operation of CEL to STB : here, describe 
operation of the controlling device 1 10. 

f(K)56]Step 101; The data request history information mentionod above for every month is transmitted to 
the history In format ion storage mea ns .! 12 of the eon.frelh.ug de vice 1 10 via the modem 1 1 1. from. STBs 

.... ■ J**'* 

120-130 of every place. The history Information storage means 1 1.2 holds these information as hysteresis 

■ ' V o..' V* ‘iv’ ■ .y 

information. 

[0057]$tep 1 02: The unjust device determining means 1 13 acquires the hysteresis information held at the 
history Information storage means 112, and rearranges a data cordon tin to time order by the time 
uifornialkm (-refer M drawing 5)-, Bmwfci 5 is- a figure for explaining the .conteMs of the rearranged 

'• '»,;!• ' *- * ■’ ■ .-*>*- *-*--*•■*-'**'- *- * • • A <y ' 'Vy 
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[005k ]And if (here is wha t has EIJ164 [ same 1 of the termhyal unit shown in the column SO I: (refer to 
drawing; S) of EOfo4 of a terminal unit, the time- information and location information corresponding 
them will Be compared, respectively, and the terminal unit corresponding to 1211164 with an unjust 
possibilit y will be determined, 

v V 

[0O59JThat is, when shown in drawing 5. all BU164 of the terminal unit indicated In each line to whic 
numerals 51 1.512,513 were given are No. 1 1030, Then, these are checked first. When the time 
information of the line to which the numerals 51 1 and 512 were given is compared, it is a history of the 
transfer request in time different, respectively, and it can be judged that there is no inconsistency in both 
histories. However, it is shown that the situation which is contradictory to the premise of not existing has 
generated the device which has B.OI64 with two same histories indicated in the line which attached the 
humerals 512 and 513, The number 90Q02 written in the column 504 of BI.J164 of STB of drawing 5 is 
BUI64 of STB 1 30. 

[0060] Namely, when the unjust de vice determining means- 115 compares the data of t he column 502 of t he 
time Information of these both sides, and the column 503 Of location information, it is a 10 -minute [ after 
the place where one side calls it Okinawa and another side is called Hokkaido and which was left distantly 
geographically ] difference. It sees from the feet that there was a transfer request with the device which 
has the EOI64 [ same ], and the device which has the BOI64 i same ] judges that it exists in A. Mr. house 
in. Hokkaido, and N Mr, house in Okinawa. And the both, sides of the device of these Both sides consider 



that the unjust devke determinittg means 1.0. is an inaccurate device, and it sends the decision result to the 
CEL preparing means 1 14, Although YTE devices 1 30 currently installed in N Mr. house in Okinawa are 
aetnal.lv inaccurate .devices, since it does not understand, in this stage, it considers that both sides are 
inaccurate for the time being till the place which says any are actually inaccurate devices. That judgment 
with unjust any is mentioned later. The situation which is contradictory to the premise that the device 
which has the EOI64 [same] from the .■result of having compared the historical data, indicated to the line 
which attached the numerals 521,322 does net exist is not found. 

[0061} Step 103: From the decision result obtained from the unjust device determining means 1.1.3, the 
CEL preparing means 1 1.4 creates CRL as shown in drawing 6 (a . k and sends it to all the CEL memory 
measures 1 15. Such creation operation of CEL Is performed every month, and H memorizes at all. the CEL 
memory measures 115 at every time, Therefore, with the list sent fro tn the CEL preparing moans 114, all 
the CRL memory measures 1 15 add. an addition, correction, etc. to already memorized CRL, and update 
them. each, time, 

[0062]Step 104: The individual CEL preparing means 1 16 separates the contents of the CEL tor every 
STB, seeing the column 601 of EIJI64 of STB in CRL created by the CEL preparing means 1. 14. Drawin g 
6 ibl and (cVis individual CEL created, respectively In order to distribute to STB 13 0 and STB 120, The 
individual CEL preparing means 11 6 distributes these individual lists to cqrrespondirig STB via tire 
modem 1 11. 

(3j Updating operation of CRL ip STB : STB 120 which obtained individual CEL (refer to drawlngT (c)j 
distributed from the controlling device .1 1 0 performs the following operations. 

fO063]Step 201:21.4, i.e., a CEL recording device, obtains the above- mentioned individual CRL, from the 
modem 2.13, and it records it on the CEL. storing means 215 which was sky condition till then. Thereby, 
connection, now VTR devices 1030 (EUI64 is No. 1 1030} which are are registered into the CEL storing 
means 215 bv STB! 20 as an inaccurate device. Therefore,, since it becomes clear in. the stane of the above- 

V* .••■:..■■■■ w 

mentioned step 2 that it is an inaccurate device even if the data transfer request from these YTE devices 
1030 will occur from now on, there is no data transfer limping gait ****=» Thereby, expansion of the 
damage caused by an inaccurate device can be prevented. Also In STB 130, same operation Is completely 
performed. In this case, ¥TE devices 150 (EUI64 is No. 1 1030} are registered into the CRL storing means 
of STB 1.30 as an. inaccurate, device: 
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of this in vention, and they describe the composi tion of the eriterta-oLeontrof preparing system, of this 
emhodiment, referring to the figure he low. In this embodiment, the same numerals were given to what was 
explained, by a 1st embodiment, and the thing of the frtndavrtentally same composition, and the detailed 
explanation was omitted. The composition of the whole system of this embodiment is the same as what 
was frmdamentallv described by drawing ,L 

f (}063]The main, points of difference between this embodiment and the above-mentioned embodiment are 
the processes of creation of the injustice and regular determination information about a terminal unit. 
Therefore, it explains focusing on this point of difference here. The criteria of control of this invention 
according to claim 5 correspond to injustice and regular determination information. 

[0066'iThe main points which are different from the composition shown by drawi n g 2 ih the composition 
of STB 120 shown in drawing 7, The new contact detection means 7 LL intMrice and a regular information 
storing means 712, and injustice and a reaular information storage means 7 13 are provided instead of the 
data reonest history information storage means 212 of drawing 2, the CEL storks, means 215, and the 

X •• y V.;. . ■ — ■ -\v .* y*;. ... . 

CEL recording device 214, Unlike what was described by a 1st embodiment, the authentication means 714 

Vv-. y ' 

does not have composition •which outputs the hysteresis information about the data transfer request from, a 





ermfMi unit , uther composition is me same, 

[006? [The new contact detection means 71 1 is a means to detect it and to aecfuire tie EOI64, when there 
is a device newly connected to the daio-commumcalions Hue 1070 of STB 120, Elil 64 acquired attaches 
EIJI64 of STB 120 and is sent to the controlling device 1 1 0 from tie modem 2 1 3. This operation is the 
work for the new registration to the controlling device of the newly connected device, and is also the work. 

-W V y. 

for eleeking simnlatieousiy whether that .new contact is inaccurate. Since this operation is performed in. 
the case of new registration, unlike what is performed, to the degree oi the data transfer request described 
bv a list embodiment of the abo ve, it is fi rst ' ti me opera t ion. 

[0068] Injustice and. tie tegular Information storage means 7 1 3 ate means to store jn injustice and. the 
regular information storing means 7 12 die information sent from tie controlling device 1 .10, 

[0069] Next, the composition of the controlling device 1 10 is described ^referring to drawing &, 

[0070] As sloven in the figure, the inquiry means 8 1 i obtains EIJI64 of the terminal unit which Is sent 
from STBs 120-130 and ■which was iiew ; ly established as new^ regisiratior! information, and EUI64 of STB 
of the transTnittina origin, and is a means to lodge whether it is inaccurate. The new registration device list 
Information memory measure 81.2 Is a means to memorize EUI64 of the new registration device obtained, 

A» V 

fro rn the iuqu fry means 81 1 . 

[0O?I]tejbstiee and the regular determination information preparing means 813 are means to create 

whether to be inaccurate and that regular determination information about the device which had new 

’ ’ ’ ... ... .... ... ... . . 

registration ..from the above-mentioned checked result by the inquiry means 811, and to transmit which the 
information to corresponding STB via the modem 1 11. When it becomes double mgistrations, injustice 
and the regular determination information preparing means 813 consider that the de vice of the loth, sides 
which have the EUI64 is an inaccurate device, and creates and distributes the list con'esposiding for every 
STB of unjust information f refer to drawing 6 lb) and fell, 

[O072]M&m1y referri.no to drawing 9 (a) - drawing. 10 (bt, operation of this embodiment is described and 
the I embodiment which stalls the criteria-of-control preparation method of this invention simultaneonsly 
is also described [ in / next / the above composition ] . VTR devices 1040 shown in drawing. 1. by this 
embodiment on account of explanation, the recoi'der 1050, and the TV device i 060, finishing f conneciion 
with ST8I20 j already it is -- finishing [ VTfo devices 150, the recorder 160, and the TV device 170 / 
connection with STB 130 ] already — it is — it is assumed that and the new registration explained below 
lave also ended just to these terminal units, VTE devices 1.030 presuppose that it is a device newly 
connected to STB 120, VFR devices 150 presuppose that it is an inaccurate device as the above-mentioned, 
embodiment also explained them. Explanation, here describes first the defecting operation of the device 
connected newly in (1) STB, Next, the authentication operation which used, the renewal of injustice and 
reauksr determination information, and the miusfiee and regular determination information in 13) STB for 
the last about creation oft he new K^:btrailon v and the- mm stiefc: -ancl mm !ar . deinHnlnation information in 
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(2; controlling devices, etc. is described. These explanation is given focusing on a point of difference, with 
a I si embodiment i 

(1) Operation in STB : suppose that VTB. devices !C530 wei - e newly connected to STB120 as above- 
mentioned (refer to drawing 7 r . 

[0073] Step 201: The new contact detection means 71 1 shown in draw in g 7 reads periodically EOI64 of all 
the terminal units connected to the data-communscations line 1070, and s'ecords it on the trtemory (graphic 
display abbreviation) to build in. And It compares with the newest record data of EUI64 of the terminal 
unit already recorded, 

[007.4] frr the situation where VTR devices 1 030 were newly connected, the periodical thing of above- 
mentioned EU164 it read and the device of No, 11030 was newly connected [ the thing 1 for EUI64 bv the 
above-mentioned comparison operations is detectable. 







[00? 5] Step 202* The new contact deletion means 711 transmits to the controlling device 110 via tie 
modem 2 1:3 further by malting into new registration Information EUI64 (No, 1 1030) of the device which 
is the target of the new .registration detected [ above-mentioned ]. and E0M4 (No- 901 20) of STS120 of a 


transmitting' 


me 


(2) Operation in. a controlling device : drawing 9 (a) Is a figure lor explaining the memory content of fh 
new registration device list information memory measure 812 before registering: VTR devices 1030, and 

Vi' .... ...... y ... .... • • , ... 

drawing 9: (b) is the figure after VTR devices 1030 were registered, ft explains referring to these drawings, 
[0()76| Step 301 1 Based on the new registration information transmitted from SBT120, the inquiry means 
81 1 shown in drawing 8 investigates the memory content (refer to drawing 9 Cali of the new registration 
device list information memory measure 812, and confirms whether the registration produces the situation 
of double registrations, ECII64 contained in new registration information is No . 1 1030. and this already 
overkos with a. registered thing .(the numerals 901 Were attached among drawing $ fa)) as it shows 

A . V.;. . • V-; -. - Sv ------ - - v 

drawing 9 (a). Therefore, about EOI64 of the duplicate both sides, the inquiry means 81.1 judges with it 
being Inaccurate, and outputs. 

|0077]Step 302: The new registration device list information tnemory measure 812 registers the contents 
of the new registration, information sent from the inquiry means S 11 (the numerals 902 were attached 
among the figu.re.pThe information on an unjust purport is recorded, on the mmarks column 903 shout 
E0164 of the duplicate bot h sides from the above" mentioned decision result. The judgment of any are 
really inaccurate m mentioned later. 

[0078]Step 303: Injustice and the regular determination Information preparing means 813 create the list of 
injustice and regular determination Infer. mat ion as shown in drawing 10 (k) and. ih) from the decision 
result sent ifont the Inquiry means 81 i . These lists are packed for every STB. The Information which 


shows injustice is recorded on the column 10 1 of the decision result by d r a wi ng I D (al and (b) as above- 
mentioned, However, when in deed with it being regular as a result of the judgment of the new registration 

■:.■■■ v tw . v . . ■ ■ w v-’ v-- v.- 

information by the inquiry moans SI 1 to Step 301, the information which shows a norm needless to say is 
recorded on the column 101 of a decision result. 

[0079 1 Step 304: Injustice and the regular dctemunatlon information preparing means 803 transmit the 


individual list of demsion results created as mentioned above to STB 120 and STB 1 30 via the modem ill. 
This transmission is performed whenever the new feskiration information mentioned above is sent from 


STB 


100801(3) Operation in STB i drawing I l i a) is a figure showing the contents already stored In injustice 
and the regular information storing means 712, and shows the situation before transmitting the individual 
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[GOSiJT.he injustice and the regular information storage means 713 shown in drawing 7 obtain the 
individual list of decision results transmitted Bom the controlling device i 10 from the modern 2 1 3. and 
adds it to. the contents of record .shown in drawing 1.1. (a). The contents of the above-mentioned individual 
list are added to the 4th line ( the numerals 1, 1 13 were attached among the figure) item on drawing ll-(b). 
The column 1 1 1 1 of the decision result of the figure shows whether the device shown in the column 1 1 12 

v-.' • • • • •• 

of EUI64 of a i ■e&Merim terminal de vice is maecnrate. or regular, 
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|0082]0n the other hand, also in STB 1 30, the completely same operation as the above is performed. 
(00S3]Next, the ease where there Is a transfer request of AY Information Is described front VTR devices 
1030 to STB120. 

[0084] In this case, in the authentication operation described at Step 1 described by a 1st embodiment - 
Step 4, since only the contents of the above-mentioned step 2 differ, onlv that point of difference is 
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the authentication means 714 does riot perform subsequent aailmrtkalioii work, a nd does not perform a 
data transfer with a demand, either. 

[0086] As a result of a check, when regular, the same operation as the contents described at the above- 
mentioned steps 3-4 is performed. 

[0087]When EUI64 of a device with a transfer request is unregistered to injustice and the regular 
information storing means 7 12, It directs that the authentication means 714 sends the new registration 
information on the de vice of the demand origin to the controllins de vice 110 to the new contact detection 

• • y*-‘ #».«• . . 

means 71 1 . Thereby, expansion of the damage caused by an inaccurate device can he prevented, 
fOOSSIBv the wav. It is **** about the judgment of the any when it is indeed with both devices being 
inaccurate as ment ioned abo ve, are really inaccurate, 

(0089JIn this ease, since the user who did not have the data which it was considered by STB that it was 
inaccurate and. was demanded transmitted tumefies doubt of the device which received that unjust judging, 
he can request Investigation from the control center which owns the controlling device 1 10, The control 
center which received the investigation request investigates the truth of the device, and confirms certainly 
whether be what was manufactured or converted bv the inaccurate method. And if it turns out to be 

ft i* 

regular, the data currently recorded on the controlling device will be corrected and the correcting result 
will be transmitted to applicable STB . A transfer request wxl 1 he accepted to the device which turned out 
to be regular bv this. 

V- v 

[0090] A magnetic recording medium, an optical recording medium, etc. which recorded the program. 'for 
making a computer perform any of the embodiment described above or all or a part of steps (MEANS) of 
each steps (or means) of one statement can be created, and the same operation as the abo ve can also be 
performed using this. The saute effect as the above Is demonstrated also in this case, 

[O09T|A!thaugh the above-mentioned embodiment described the ease where it recorded on the data 
request history information storage means 212 for ail the data transfer requests which occurred from, the 
terminal unit, the composition recorded only for the transfer request of not only this but data important for 
example, may be used. Here, it is paper Lee (PREC) and data like pay-per- view (PPM) of charging as 
important data, for example if it records. Therefore, what pays money for every chain .flannel, for 
example, the program data of a free channel, etc. axe good also as outside of an object.; 

[0092] Although a 2nd embodiment of the above described t he case where it was detected automat ically 
that the terminal unit was newly connected, the registration postcard is attached not only to this but to the 

s* ■ . f. ft 

device purchased newly, for example, and it is good also as composition with which a user sends the 
postcard to the control center which owns a controlling device, 

■>. y? 

[0093] Although the above-mentioned embodiment described the case where transmission to STB of CEL, 
or injustice and regular information was performed using a telephone line, it may send not only by this but 
bv broadcast. 

[0094] Although a 2nd embodiment of the above compared the new registration Information sent from the 
STB side, and the already sent accumulation data of new registration information and described the case 
where it checked for no duplication, It may have a memory holding the list data of BUI64 of a produced 
regular device indicated to the production information led from each company which manufactured not 
only this but the device, and the composition of also performing comparison with the contents of the 
memory mav be used in the case of the above-mentioned comparison. Even when El J 164 contained in new 



registration Information Is completely random, by comparing with the contents of the above-mentioned 
memory, If it is a number which does not correspond, it is not recorded on the new registration device list 
information memory measure S ! 2 even fo hut even if it is in the situation not -overlapping, it can judge 


with It being inaecnme and the effect of dishonesty prevention will improve more. 

[(}093]The above -mentioned embodiment Is available even for even referring to not only this but only 
referring to CM, as for example, contents of attestation, or injustice and regular information, although the 
case where full-scale authentication operation was performed was described, 

[0096]llsing a computer, work of a program may realise by software or the processing operation of each, 
means of the above-mentioned embodiment may realise the above-mentioned processing operation in hard 
by circuitry characteristic for not using a computer. 

f(I097]The data transfer unit of the Invention in this application was STB In the shove- mentioned 
embodiment, when the STB detected connection with STB of the data request terminal unit connected 
newly, it explained the ease where the new registration information on the data request device was 

o 


transmuted to a control unc device; but. 


? U: i.nts. 


example, the new contact detection means 


711- If there is nothing same as compared with EIJM4 of the terminal unit which obtains Eli 164 of the 

»,o* ,v 

VTR devices 1030, ahead v checks new connection, and is recorded when, attestation is newly required 
from VTR devices 1030, The composition detected as what was connected newly may bp Sufficient as the 
VTR devices 1030. 

[009S|Sy the above-mentioned embodiment,, when it has been checked as a resalt of attestation that it is a 
regular device, explained the example: of sending the data sequest history information which contains the 
identifier (BUI. 64) of the data request terminal unit from a data transfer unit (STB) to a controlling device, 
hut , R may not be concerned w ith the result of not only this but attestation, but the composition of sending 
the data request history information may be used to a contmlling device. In this case, what is necessary Is 
just to send with hysteresis information also that, when it becomes clear that it is an inaccurate device in 
process of attestation, 

I.0099] Although, the above- mentioned embodiment described the esse where, STB used the criteria of 
control (OIL, or injustice and regular determination Information) of the invention in this application in 
authentication operation, the composition which uses neither the above CRL, nor injustice and regular 
determination Information In the authentication operation not only as this hut as an STB may be used, 
[01001 

[Effect of the Invention] This invention has the strong: point in which detection of an inaccurate device can 
he ensured compared with the former so that clearly from the place described above. 
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[Oaim I j When a data request occurs to a data transfer unit front each data request terminal, unit which has 
a respectively peculiar Identifier,, about those data requests. As opposed to a data . request terminal unit 
which performed attestation 'based on a predetermined attestation standard, and performed said data 
request from said data transfer unit according to a result of said attestation,: Determine whether transmit 
the demanded data and a controlling de vice is received from said data transfer unit according to a result of 
a usual state or said attestation. Send data request history information eontaining said identifier of the data 
request terminal unit, and said controlling device, A critcrla-of-control preparation method judging 
whether a data request terminal unit contained in the data request history inhorniatlon is regular, being 
based on the decision resul t, and creating or uodatlna criteria of control bv a predetermined iudsin s 
stmid&rd using said data request history inforrmtion sent 

[Claim 2] Are information eharaeterieed by comprising the following and said predetermined judging 
standard In said controlling device. In all. the data request history infoonatlon transmitted' from said two or 
more data transfer units. The criferiafoLoontrdi preparation method according to claim ! being what 
determines a data request terminal unit which compares said time Information corresponding to an 
identifier and said location information of these : plurality,. ..respectively, and has an. identi her with an unjust 
oossifcility when two or more same identifiers exist. 

Jy yv 

Time .■■information which specifies time with said data request from said data request terminal unit with, 
which a group formed by a data request terminal unit end said data transfer unit of said plurality has those 
with two or more groups, and said data request history information has the identifier other than said 
identifier. 

Location Information which soeeifies the whereabouts of the data request terminal unit. 


[Claim 3j When a data request terminal unit which has an identifier with a decision result by said judging 
standard' and said unjust possibility is determined, consider that ail the data request terminal units which 
have the iden tifier same in them are inaccurate things. and as said criteria of control The criteria ~o.f> 

■ ; • v- . . . : ■; - - - - 

control preparation method according, to claim 2 creating or updating an unjust list of data .request terminal 
units It was considered that were these Inaccurate things. 

[Claim 4]The critcrla-of- control preparation, method according to claim 3, wherein said controlling device: 
transmits said all .or some of unju st list to said data transfer unit and said data transfer u nit performs said 
attestation, using said transmitted unjust list at least, 

IClaim S j A data transfer unit connected to each data request terminal unit which has a resoectlvelv 
peculiar identifier the singular number or a controlling device to manage ! two or more L An identifier of 
a schedule connected newly or said data request terminal unit connected newly sent using new registration 
information to include bv a predetermined lodging standard, A criferia-'oTcoutrel nrenaraffon method 
judging whether a data request terminal unit coiTespondmg to said new registration Information is regular, 
being based on the decision result, and creating or updating criteria of control 

[Claim 6] A group formed by a data request terminal unit and said data transfer unit of said plurality those 
with two or more groups, and said data transfer unit. When connection with said, data transfer unit of said 
data request terminal, unis, connected newly is detected. Transmit new registration information on the data 
request device to said controlling device, and said predetermined, judging standard. The same identifier as 
an Identifier contained, in. the new registration information whenever said new registration information is 
transmitted, The c rir e ri a ~ o r - c o n t ro 1 preparstloir method according to claim 5 being a standard which 



judges whether it 'has already existed, in a list of said identifiers currently transmitted and held from said 
two or more data transfer units. 

[’Claim 71 When a decision result bv said iudaina standard stows that said same identifier exists during 
said list, consider that all the data request terminal units which have the identifier same irr them are 
inaccurate things, and as said criteria of control The cfherla-oi-conirol preparation method according to 

i Vw-. T v V V V--. 

claim; f> creating or updating an just information on a data .request terminal unit it was considered tha t were 
these inaccurate things. 
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during said list. The edteria-of-eontml preparation met hod according to claim. 6 creating or updating 
regular information on a data request terminal unit it was considered that was the regular thing. 

[Claim. 9]Said controlling device transmits to said data transfer unit, and said all or a part of unjust 
information, or said regular Information said data transfer Unit, When a data request occurs from each data 
request terminal unit, about those data requests. The critem- of control preparation method according to 
c!ai.ni 8 being what determines whether transtmf the demanded data to a data request terminal unit which 
attested using said transmitted unjust Information or regular information at least, and performed said data 
request according to the authentication result. 

[Claim 1 Of When said controlling device transmits said a part of unjust information to said data transfer 
unit, The criteria-of-control preparation method according to claim 4 or 9 which extracts information 
corresponding to the data transfer unit and a data request terminal unit in connecting relation among 
information about a data request terminal unit currently mentioned to said unjust information, and is 


eh arac ter .teed by transrn tttin g. 

[Clniru 11] A criteria -oimoefrol. prepaiing system comprising: 

Two or more data request terminal units which have a respectively peculiar identifier. 

When a data request occurs Com. these data request terminal, unit, about those data requests, performing 
attestation based on a predetermined attestation standard — { 1) ~~ to a data request terminal unit which 
performed said data request according to a result of the attestation, detenmning whether transmit the 
demanded data (2)— alwava or accordhia to a result of the attestation with a data transfer unit which 
outputs data request history information containing said identifier of the data request terminal unit. A 
controlling device which acquires said said outputted data request history information, judges whethc 
data request terminal unit contained in. the data request history information by predetermined judging 
standard is regular, is based on the decision result, and creates or updates criteria of control. 
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[Claim .12] A medium; recording a program for making a computer perform any of claims .1-1.0, or ail or a 
part of steps of each steps of one statement, 

[Claim 131 A. medium recording a program; for making a compu ter perform a function of all or a part of 
means of each means accord ing, to claim 1 i . 


[Translation done .] 



